gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus network access from host running gh-ost to the attack's malicious MySQL server. The `-database` parameter does not properly sanitize user input which can lead to arbitrary file reads.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Github |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2022-1182 | gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus network access from host running gh-ost to the attack's malicious MySQL server. The `-database` parameter does not properly sanitize user input which can lead to arbitrary file reads. |
 Github GHSA |
GHSA-rrp4-2xx3-mv29 | Command injection in gh-ost |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Mon, 05 May 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2025-05-05T16:34:00.348Z
Reserved: 2021-11-16T00:00:00.000Z
Link: CVE-2022-21687
Vulnrichment
Updated: 2024-08-03T02:46:39.432Z
NVD
Status : Modified
Published: 2022-02-01T12:15:08.200
Modified: 2025-05-05T17:17:47.217
Link: CVE-2022-21687
Redhat
No data.
OpenCVE Enrichment
No data.